You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Programs closing

- Xfire (gamer's messenger) closes after I log in with my username/pw- Internet Explorer 6 and 7 both close after loading a webpage- Windows Media Player closes instead of loading a movieOther programs seem to function ok.

First of all you've got two antivirus programs installed and active,Kaspersky Anti-Virus 6.0 and AVG Free.This can lead to conflicts between the two,thus causing possible system slowdowns,false virus alerts,you should uninstall one of them.

======================

Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546

You are well advised to remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present:

Please download DrWeb-CureIt & save it to your desktop. DO NOT perform a scan yet.

You should copy/print the following because you need to be in Safe Mode from here on.

Reboot your computer into SAFE MODE" using the F8 method. To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".

Scan with DrWeb-CureIt as follows:* Double-click on drweb-cureit.exe to start the program. An "Express Scan of your PC" notice will appear.* Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.* Once the short scan has finished, Click Options > Change settings* Choose the "Scan tab" and UNcheck "Heuristic analysis"* Back at the main window, click "Select drives" (a red dot will show which drives have been chosen)* Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.* When done, a message will be displayed at the bottom advising if any viruses were found.* Click "Yes to all" if it asks if you want to cure/move the file.* When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable". (This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)* Next, in the Dr.Web CureIt menu on top, click file and choose save report list.* Save the DrWeb.csv report to your desktop.* Exit Dr.Web Cureit when done.* Important!Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.* After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

Download rustbfix from Here and save it to your desktop.Double click on rustbfix.exe to run the tool.If a Rustock.b-infection is found, you will shortly hereafter be asked to reboot the computer.The reboot will probably take quite a while, and perhaps 2 reboots will be needed.But this will happen automatically.After the reboot 2 logfiles will open (C\avenger.txt & C\rustbfix\pelog.txt).Post the content of these logfiles along with a new HijackThis log.Let me know how your pc is running now please.

Create a new System Restore Point:Help if needed: Click on Start/All Programs/Accessories/System Tools/System Restore. In the System Restore window,click "Create a Restore Point" button,then click 'Next'. In the window that appears,enter a description,then click on "Create", then "Close". The date and time is created automatically.

You should now go to Windows Update and install any available critical/high priority updates.

Please Note:Your version of Sun Java is out of date.Older versions have vulnerabilities that malware can use to infect your system.Please follow these steps to remove older versions of Sun Java,and then update.1. Download the latest version of Java Runtime Environment (JRE)2. Scroll down to where it says 'Java Runtime Environment (JRE) 6.0'.3. Click the "Download" button to the right.4. Check the box that says: "Accept License Agreement".5. The page will refresh.6. Click on the link to download 'Windows Offline Installation, Multi-language' and save to your desktop.7. Close any programs you may have running - especially your web browser.8. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.9. Check any item with Java Runtime Environment (JRE or J2SE) in the name.10. Click the Change/Remove button.11. Repeat as many times as necessary to remove each Java versions.12. Reboot your computer once all Java components are removed.13. Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

Since your problem appears to be resolved, this thread will now be closed.
If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. Include the address of this thread in your request. If you should have a new issue, please start a new topic. This applies only to the original topic starter.
Everyone else please begin a New Topic.

Please download Sophos Anti-Rootkit,and save it on your desktop. 1. Double-click sarsfx.exe to extract the files and leave the default settings.2. Open the folder C:\SOPHTEMP and double-click sargui.exe to start the program.3. Make sure the following are checked:- Running processes- Windows Registry- Local Hard Drives4. Click the "Start Scan" button.5. Click the "OK" button after you get the notification that the scan has finished and close the program.6. Click on Start>Run and type, or copy and paste: %temp%\sarscan.log then press Enter.7. This should open the log from the rootkit scan. Post this log into your next reply.

Note: If the scan is performed while the computer is in use, false positives may appear in the scan results. This is caused by files or registry entries being deleted,including temporary files being deleted automatically. It has also been reported that Trojan Hunter is detecting Sophos Anti-rootkit as Trojan.Dropper.Interlac.100 So if you have Trojan Hunter installed you will need to disable it prior to running a scan.

You have got Norton Internet Security or Norton Antivirus installed,or you have had it installed at some point.You have Kaspersky Anti-Virus 6.0 installed.Not a good idea to have more than one antivirus program installed on your computer,or even the leftovers of a program you've uninstalled or tried to uninstall. Each program may interpret the actions of the other as viral, therefore giving you false virus warnings about virus-related activities.It could also lead to system slowdowns and other problems within the operating system,due to the two conflicting with each other.You should uninstall one or the other as soon as possible.